$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft File: F03C1838587677BF6505C46715F42F8B8416F949.mft (raw, json) Hash identifier: 4Cg1PGK5ayH54ZLpH92rZFgr+nWBjfbCUi0Jg9dcVec= Subject key identifier: D1:83:87:8A:23:5E:DA:8B:EB:DB:1D:3B:53:65:3A:2E:FB:04:3E:D1 Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 Certificate issuer: /CN=F03C1838587677BF6505C46715F42F8B8416F949 Certificate serial: 3CB4293EB7FEEFEFB8CE927C80009D8A7449CF9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft Manifest number: 0238 Signing time: Fri 17 Apr 2026 21:32:01 +0000 Manifest this update: Fri 17 Apr 2026 21:27:01 +0000 Manifest next update: Tue 21 Apr 2026 07:54:01 +0000 Files and hashes: 1: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: 5d7eyl15yI3SPHjS9CWQbB/B/JL+7bbkCavXXd21rTk=) 2: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: o1axn6FylL5HDL/+cmxNZgdh+qBhrW0MUa5ofe3vKgY=) 3: F03C1838587677BF6505C46715F42F8B8416F949.crl (hash: b/macZJd+bIeHuadKhSP3CaxV528MYIp+VCzfi6ZLIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b4:29:3e:b7:fe:ef:ef:b8:ce:92:7c:80:00:9d:8a:74:49:cf:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949 Validity Not Before: Apr 17 21:27:01 2026 GMT Not After : Apr 21 07:54:01 2026 GMT Subject: CN=D183878A235EDA8BEBDB1D3B53653A2EFB043ED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:97:bf:0f:01:a4:ed:7e:49:8b:42:76:b6:9d: 5d:07:2f:c6:d1:31:ba:2a:f6:af:74:54:44:7f:0f: 92:22:de:fd:99:73:55:14:b4:c7:7b:b5:4b:0d:7e: 83:a7:0b:af:da:d1:3b:33:b5:70:64:e1:18:c5:47: 3d:d3:8e:5a:c2:ba:37:ef:61:7f:62:22:ae:22:82: 61:39:83:94:d2:3f:d6:3c:f6:c8:87:50:17:b5:65: 95:22:da:a4:3b:b8:39:9f:7a:55:f8:26:eb:96:7c: f1:c0:7c:fb:ac:ca:31:6d:d1:01:3a:5d:ab:00:a1: 7b:a9:fd:1b:23:5e:5e:71:d5:4e:07:cd:34:cf:ec: 84:b7:e4:6d:f6:7c:6c:0a:58:11:a8:3f:33:52:73: 31:9e:3d:0f:cf:2b:6d:13:d8:1d:81:ab:db:fb:d7: ee:4e:93:56:17:5d:78:1a:cc:d2:97:3f:5e:cf:86: 43:58:06:fd:82:2a:9d:c7:a0:8a:7e:18:2f:a7:9d: af:cc:7c:f7:f3:c1:1f:b5:d4:62:b4:ab:33:77:ff: 5c:e3:4e:d3:cc:b4:f5:39:fa:97:32:63:e1:f3:82: 8c:23:d2:8f:6e:d6:b5:d0:8e:13:21:4b:40:32:c0: 76:6e:22:9f:49:5c:d7:e4:28:39:bb:0e:ce:7e:17: 51:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:83:87:8A:23:5E:DA:8B:EB:DB:1D:3B:53:65:3A:2E:FB:04:3E:D1 X509v3 Authority Key Identifier: keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:fa:75:5d:fb:55:4c:d9:b4:59:0d:46:e5:67:51:e8:c7:8c: 15:67:e0:3c:64:35:b0:3a:b3:77:5b:ef:13:fc:1b:a3:60:1d: d5:ea:7c:b7:42:fd:67:b8:7e:f5:c8:83:7f:b0:75:79:7c:19: 5d:fe:a9:46:f0:bb:d9:b4:ff:28:69:77:e4:7d:7a:f6:d7:13: bd:40:15:6a:a4:0e:85:77:84:ef:b4:12:56:13:46:0c:4d:68: 4b:27:56:48:a4:7e:64:ce:79:e5:4f:87:fa:f2:94:4f:01:7d: 26:4d:53:a3:9c:c1:d6:a2:0a:ef:79:c5:93:83:97:6b:30:be: e6:94:41:4b:05:09:ca:97:29:5e:b2:20:c8:ed:56:0d:9d:9f: 33:ab:4d:e9:e1:9f:8f:a9:ab:37:c3:0d:2a:59:6d:4b:fd:a9: 4b:69:78:c3:fc:66:77:53:d0:5d:9a:1e:b2:ab:6d:d6:e8:00: a1:45:b2:50:7a:f1:74:08:43:b6:16:a4:89:ab:04:8c:72:f6: b4:e4:00:00:e0:f8:b9:06:38:68:7b:12:8a:5d:b9:6c:72:02: 4d:ff:99:f2:21:07:b1:e5:eb:7f:bd:68:e6:62:1d:d3:2e:95: 0d:49:cc:16:4f:a2:ce:a3:31:7c:d4:b1:e2:8e:c6:1d:ff:5f: 37:c0:27:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPLQpPrf+7++4zpJ8gACdinRJz5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4 NDE2Rjk0OTAeFw0yNjA0MTcyMTI3MDFaFw0yNjA0MjEwNzU0MDFaMDMxMTAvBgNV BAMTKEQxODM4NzhBMjM1RURBOEJFQkRCMUQzQjUzNjUzQTJFRkIwNDNFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjl78PAaTtfkmLQna2nV0HL8bR Mboq9q90VER/D5Ii3v2Zc1UUtMd7tUsNfoOnC6/a0TsztXBk4RjFRz3TjlrCujfv YX9iIq4igmE5g5TSP9Y89siHUBe1ZZUi2qQ7uDmfelX4JuuWfPHAfPusyjFt0QE6 XasAoXup/RsjXl5x1U4HzTTP7IS35G32fGwKWBGoPzNSczGePQ/PK20T2B2Bq9v7 1+5Ok1YXXXgazNKXP17PhkNYBv2CKp3HoIp+GC+nna/MfPfzwR+11GK0qzN3/1zj TtPMtPU5+pcyY+Hzgowj0o9u1rXQjhMhS0AywHZuIp9JXNfkKDm7Ds5+F1HdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0YOHiiNe2ovr2x07U2U6LvsEPtEwHwYDVR0j BBgwFoAU8DwYOFh2d79lBcRnFfQvi4QW+UkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmQzZGQ3OS04NjM1LTQ4NTctOGEzYy05ODU5NTQ1MTZmOWUvMC9GMDNDMTgzODU4 NzY3N0JGNjUwNUM0NjcxNUY0MkY4Qjg0MTZGOTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4NDE2 Rjk0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJG OEI4NDE2Rjk0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAND6dV37VUzZtFkNRuVnUejHjBVn4DxkNbA6 s3db7xP8G6NgHdXqfLdC/We4fvXIg3+wdXl8GV3+qUbwu9m0/yhpd+R9evbXE71A FWqkDoV3hO+0ElYTRgxNaEsnVkikfmTOeeVPh/rylE8BfSZNU6OcwdaiCu95xZOD l2swvuaUQUsFCcqXKV6yIMjtVg2dnzOrTenhn4+pqzfDDSpZbUv9qUtpeMP8ZndT 0F2aHrKrbdboAKFFslB68XQIQ7YWpImrBIxy9rTkAADg+LkGOGh7EopduWxyAk3/ mfIhB7Hl63+9aOZiHdMulQ1JzBZPos6jMXzUseKOxh3/XzfAJ9Q= -----END CERTIFICATE-----Generated at Sat Apr 18 00:07:15 2026 by rpki-client